Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Sammycage records in CISA KEVNo Sammycage vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00476 · Published 2025-01-23 · No fix listed CWE-770
Priority MEDIUM 62
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00361 · Published 2025-01-23 · No fix listed CWE-400
Priority MEDIUM 62
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00361 · Published 2025-01-23 · No fix listed CWE-653
Priority MEDIUM 62
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00361 · Published 2025-01-23 · No fix listed CWE-653
Priority MEDIUM 62
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00418 · Published 2025-01-23 · No fix listed CWE-476
Priority MEDIUM 62
lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00417 · Published 2025-02-03 · No fix listed CWE-653
Priority MEDIUM 58
lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00306 · Published 2024-05-01 · No fix listed CWE-787
Priority MEDIUM 50
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00847 · Published 2024-05-01 · No fix listed CWE-653
Priority MEDIUM 40
lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00744 · Published 2024-05-01 · No fix listed CWE-125
Priority LOW 31
lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00611 · Published 2024-05-01 · No fix listed CWE-369
Priority LOW 29
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00361 · Published 2025-01-23 · No fix listed CWE-653
Priority LOW 23
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
CVSS 3.1MEDIUM 5.0· Local · Low privileges · User interaction · EPSS 0.00297 · Published 2024-05-01 · No fix listed CWE-125
THREATIST.IORead the docs